Government requests for user data worldwide - Statistics & Facts
Governments around the world have set their sights on users’ data. Transparency reports from Google, Microsoft, Apple, and Meta show that in recent years, law enforcement and government agencies have actively sent more data disclosure requests than ever before. This has raised numerous concerns about users’ privacy and government surveillance. It has since become common knowledge that users’ online activity is not entirely private, and it is always possible for data to make it into the hands of law enforcement or government agencies, should such a request be made.
According to the Fourth Amendment to the U.S. Constitution and the Electronic Communications Privacy Act (ECPA), the government cannot force an online service provider to disclose user information. However, it is possible under certain circumstances. U.S. government agencies and law enforcement authorities must always provide a subpoena to allow disclosure of basic subscriber registration information and specific IP addresses. If the case is criminal, the requesting party should issue a court order to force disclosure of non-content records, such as the “To/From/Cc/Bcc” and “Timestamp” fields in e-mails and provide a search warrant to urge disclosure of the content of communications, such as e-mail messages, documents, and pictures.
Numbers tell all
In the first half of 2023, Google received over 211,000 disclosure requests for user data from government and law enforcement agencies worldwide. In these requests, approximately 436,000 user accounts were specified. Both figures significantly increased in the last decade. In the first half of 2013, the requests amounted to around 26,000, mentioning 42,500 accounts. In its latest measured period, Meta reported nearly 272,000 user data requests worldwide – representing more than a tenfold increase in ten years. Microsoft received a slightly lower number of requests, approximately 25,000, with about 59,500 user accounts specified in these requests.What gives them the right? Google’s case
Because of differences in laws, the requirements for user data requests vary in each country. In the case of Google Inc., for example, foreign governments requesting user data are required to follow U.S. law, the law of the requesting country, and the international norms under the Global Network Initiative’s Principles on Freedom of Expression and Privacy.According to the Fourth Amendment to the U.S. Constitution and the Electronic Communications Privacy Act (ECPA), the government cannot force an online service provider to disclose user information. However, it is possible under certain circumstances. U.S. government agencies and law enforcement authorities must always provide a subpoena to allow disclosure of basic subscriber registration information and specific IP addresses. If the case is criminal, the requesting party should issue a court order to force disclosure of non-content records, such as the “To/From/Cc/Bcc” and “Timestamp” fields in e-mails and provide a search warrant to urge disclosure of the content of communications, such as e-mail messages, documents, and pictures.
